When the Quint agent records an AI agent's traffic, it replaces the credentials it recognizes, such as cloud access keys and Slack bot tokens, with a mask before the content is sent to Quint's cloud. Detection runs on the Mac against a large set of known credential formats, and masking is on by default.
Agent 1.1.24 closes two gaps. Very long credentials, such as large private keys, are now kept whole and masked, and credentials written inside quoted strings in JSON are now found. Both fixes are in agent 1.1.24 and later.
Masking covers recognized credentials only. Other content in a prompt or a tool result is sent as before.